Formatting

This commit is contained in:
Andrea Bichsel (Aquent LLC)
2019-03-08 22:36:13 +00:00
parent 6fe7556049
commit a82e95f29f

View File

@ -1,39 +1,54 @@
---
title: Prevent security settings changes with Tamper Protection
description: Use tamper protection to prevent malicious apps from changing important security settings.
keywords: malware, defender, antivirus, tamper protection
search.product: eADQiWindows 10XVcnh
ms.pagetype: security
ms.prod: w10
ms.mktglfcycl: manage
ms.sitesec: library
ms.pagetype: security
ms.localizationpriority: medium
author: andreabichsel
ms.author: v-anbic
---
# Prevent security settings changes with tamper protection
**Applies to:**
- Windows 10
Prevent security settings changes with Tamper Protection Tamper protection helps prevent malicious apps from changing important security settings. These settings include:
Tamper Protection helps prevent malicious apps from changing important security settings. These settings include: - Real-time protection
- Cloud-delivered protection
- IOfficeAntivirus (IOAV)
- Behavior monitoring
- Scheduled scans
- Policy override settings
• Real-time protection With tamper protection set to **On**, you can still change these settings in the Windows Security app. The following apps and methods can't change these settings:
• Cloud-delivered protection
• IOfficeAntivirus (IOAV)
• Behavior monitoring
• Scheduled scans
• Policy override settings
With Tamper Protection set to On, you can still change these settings in the Windows Security app. The following apps and methods can't change these settings: - Mobile device management (MDM) apps like Intune
- Enterprise configuration management apps like System Center Configuration Manager (SCCM)
- Command line instruction MpCmdRun.exe -removedefinitions -dynamicsignatures
- Windows System Image Manager (Windows SIM) settings DisableAntiSpyware ad DisableAntiMalware (used in Windows unattended setup)
- Group Policy
- Other Windows Management Instrumentation (WMI) apps
• Mobile device management (MDM) apps like Intune The tamper protection setting doesn't affect how third party antivirus apps register with the Windows Security app.
• Enterprise configuration management apps like System Center Configuration Manager (SCCM)
• Command line instruction MpCmdRun.exe -removedefinitions -dynamicsignatures
• Windows System Image Manager (Windows SIM) settings DisableAntiSpyware ad DisableAntiMalware (used in Windows unattended setup)
• Group Policy
• Other Windows Management Instrumentation (WMI) apps
The Tamper Protection setting doesn't affect how third party antivirus apps register with the Windows Security app. On computers running Windows 10 Enterprise E5, users can't change the tamper protection setting.
On computers running Windows 10 Enterprise E5, users can't change the Tamper Protection setting. Tamper protection is On by default. If you set tamper protection to **Off**, you will see a yellow warning in the Windows Security app under **Virus & threat protection**.
Tamper Protection is On by default. If you set Tamper Protection to Off, you will see a yellow warning in the Windows Security app under Virus & threat protection. ##Configure tamper protection
Configure Tamper Protection 1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for **Defender**.
2. Select **Virus & threat protection**, then select **Virus & threat protection settings**.
3. Set **Tamper Protection** to **On** or **Off**.
1. Open the Windows Security app by clicking the shield icon in the task bar or searching the start menu for Defender. >[!NOTE]
2. Select Virus & threat protection, then select Virus & threat protection settings. >If your computer is running Windows 10 Enterprise E5, you can't change the tamper protection setting.
3. Set Tamper Protection to On or Off.
Note
If your computer is running Windows 10 Enterprise E5, you can't change the Tamper Protection setting.